NAV 2.x - Device Driver and Command line Switches

The NAV Device Drivers

The Norton AntiVirus can be considered as being composed of three distinct
but inter-relating programs or modules.  They are as follows:

              NAV CLINIC
              using mainly the files NAV.EXE and NAVW.EXE

              NAV INTERCEPT
              using mainly the files NAV_.SYS, NAV&.SYS and NAVPOPUP.EXE
	
              NAV NETWORK MANAGER (only version 2.1)
              using mainly the files NAVNET.EXE, NAVNETW.EXE and NAVUPDAT


NAV INTERCEPT

NAV Intercept is a memory-resident device driver that acts as the monitoring
or watchdog portion of the program.  Intercept executes in the background,
checking for viruses automatically as you perform your normal computing
procedures.

NAV Intercept installs as a Device Driver from your CONFIG.SYS file.
Since it loads as a device driver, it is much more difficult to tamper
with than a TSR that loads from AUTOEXEC.BAT.  Also, it can begin protecting
your system much earlier by loading sooner than other anti-virus TSR programs.

NAV Intercept has several levels of operation, depending on your needs and
resources, it's mainly a question of protection vs. memory.  The level of
Intercept protection is determined by the syntax of the DEVICE = line that
NAV will insert into the computers CONFIG.SYS file during installation.
The line will read:

	DEVICE = [d:] [path] NAV&.SYS [/switches]**
		
				-OR-

	DEVICE = [d:/path/]NAV_/SYS [/switches]**


Whether you choose NAV&.SYS or NAV_.SYS depends on how much protection you
want and how much memory you choose to allocate.  Basically, you trade memory for protection.  The 
possible configurations are explained as follows:
NAV_.SYS:

        NAV_.SYS is the Comprehensive Scanning level of Virus Intercept.
This level will take approximately 58k of memory (NAV2.0 takes approximately
39K).  With NAV_.SYS loaded, Intercept will automatically scan files before
they are read, copied or executed.  NAV_.SYS will also automatically scan the
boot sector of diskettes as you access them.  This level will also check the
boot sector of diskettes when you attempt a warm-reboot (Crtl+Alt+Del).
This prevents you from accidentally re-booting off an infected diskette.
	
 NAV_.SYS will automatically try to utilize EXPANDED memory if available.
	
NAV&.SYS /b

	With the NAV&.SYS /B device drive loaded, you have chosen the
Boot Sector and Execution Scan level of virus intercept.  The /B switch can
only be used with NAV&.SYS.  This causes intercept to use approximately 7k.
With this driver loaded, Intercept will scan files before they are run, as
well as checking the boot sector of floppies as they are accessed.  This
level will also check the boot sector of diskettes when you attempt a
warm-reboot (Ctrl+Alt+Del).  This prevents you from accidentally re-booting
from an infected diskette.  If you are in a DOS screen when NAV&.SYS detects
a boot-sector virus, you will not see a red warning screen.  In this case, a
one-line warning bar will be displayed on the bottom of your screen.
	
NAV&.SYS
	
	This driver takes approximately 2k of memory and will only scan files
before the executed.  Because of its small size, this driver does not support
pop-up warnings in Windows.


NAV 2.1 Command Line Switches

This update includes numerous new switches that were added to NAV_ and NAV&
during the in-line process.  The original posting of the DOS Clinic switches
to inhibit certain memory uses were incorrect. Take special note of that
section.  A new section was added to include the Windows Clinic switches.

NAV INTERCEPT
		
	/A	This switch directs NAV Intercept to check the boot sector of
                your floppy drives when a warm boot is detected.  This switch
                can not be used with NAV&.SYS 1.7k driver.

	/B  	Scan Floppy Boot Sectors (NAV&.SYS ONLY)
	
	/ID=xxx	TSR ID switch for use on the device driver line of the
                CONFIG.SYS.  The variable xxx is any number among 192-255.
                This switch can be useful in eliminating conflicts with TSRs
                that will attempt to use the ID already reserved by NAV_.SYS.
                If you experience a conflict, try setting the TSR ID to 200.
              	
                           DEVICE=C:\NAV\NAV_.SYS  /ID=200
		
	/NOMTE	Disable MtE Virus Scanning
		
	/NE	Prevents Intercept from attempting to use expanded memoryT.
		
	/NX	Prevents Intercept from attempting to use extended memory.  
		
	/NR	This allows automatic network redirector detection to be
                disabled for all versions of Virus Intercept.  Normally,
                Virus Intercept will automatically detect that a network
                redirector is being installed.  Once installed it will
                enable NAV.EXE to disable this automatic detection.
                After the switch is added to the device line in the CONFIG.SYS,
                you can disable automatic network redirector detection by
                specifying the following command before the network redirector
                is loaded:
	
					NAV /NR-
				
		After the network redirector is unloaded, you can enable it
                by typing:
	
					NAV /NR+
	
		This option is useful when experiencing problems unloading
                NETx.

	/LM	LanMan/NDOS special switch - Helps prevent lock ups due to
                shortages in reserved memory.
	
	/NW	Disable warm boot detection.
	
	/OVL=	This command line switch is for the 2k and 7k Virus Intercept
                (NAV&.SYS,NAV&.SYS /B) specifies the location of the NAV_.SYS
                file.   It is necessary if NAV&.SYS  and NAV_.SYS are not in
                the same directory.
	
                              DEVICE=NAV&.SYS /OVL=F:\NETDIR
	
	/W	It will turn off the Write Protection Warnings.  It will cause
                NAV Intercept to give an alert warning when ANY program tries
                to write to the special system areas of ANY disk.  This can only
                be used with NAV_.SYS driver.
	
NAV CLINIC

	/A		Scans all local hard drives, supersedes other scan
                        requests

	/BOOT	Scan the boot sectors ONLY of all specified drives
	/SAVE		Create a new Rescue Disk
	/FIL:file	Scan drives, directories, or files named in the file
                        file

	/M+ or /M-	Enable (+) or disable (-) memory scanning
	/NS		Dont stop when a virus is found
           /NOMTE	Disable MtE Virus Scanning
	/REFRESH	Inoculate or reinoculate all files scanned
	/RESTORE	Restore a rescue disk
	/S		Scan subdirectories of any directory named
	/STOP		Stop the scan when a virus is found and halt
                        the system until Ctrl+C is hit.


DOS Error Levels
		1		Virus Found in Memory
		2		Virus Clinic May Be Infected
		3		Viruses Detected During Scan
		4		No Viruses Detected
		5		Device Driver is NOT Active in RAM
		6		Device Driver is Active in RAM
		255		Scan Not Completed







UNDOCUMENTED SWITCHES

INHIBIT EXTRA MEMORY USE

When memory conflicts occur with other programs that use (improperly) the
memory of the PC to the fullest.  Starting NAV with these switches can both
offer the user a work-around and serve to help isolate and/or reproduce the
problem.

	/NOUMB
	/NOPAGEFRAME
	/NOEMS
	/NOXMS
	/NODISKSWAP
	/NOHMA

Video related
          /BW			Monochrome display
          /LCD			LCD monochrome display
          /HERC			Hercules display
          /NOZOOM 		Inhibit zooming windows
          /G0			No redefined characters
          /G1			Only controls
          /G2			Mouse and controls
          /M0			Standard mouse cursor
          /M1			Graphic mouse cursor
          /NOS			No suspend - related to when screen updates occur
	
Keyboard related
         /NOHELP		Disable help
         /USEINT16		Use alternate keyboard interrupt

	Note: 	The latest version of Norton AntiVirus is 3.0 and is
                available through Customer Service at 800-441-7234.
	

Telephone number:

(503) 465-8420  - 90 days of free technical support - 7:00 am to 4:00 PM Pacific Time
(800) 927-3991  - $25.00 charge per incident - 6:00 am to 5:00 pm Pacific Time
(900) 646-0007  - $ 2.00 charge per minute. - 6:00 am to 5:00 pm Pacific Time
(800) 441-7234  - Customer Service - 7:00 am to 4:00 pm Pacific Time
(503) 984-2490  - Faxback Retrival System - 24 Hours

 




